Update documentation related to SQL injection with raw queries

[joshbouncesecurity]

Describe this PR

See discussion here;
https://discord.com/channels/937751382725886062/1218200207884288071

Basically, the docs make it seem like queryRaw and executeRaw are safe from SQL injection when it fact is possible to use them unsafely as well.

I have prepared an update to the documentation to reflect this.

Changes

• I have moved the "parameterized queries" section into the "SQL Injection" section (only minor changes which you can see in this specific commit: 8575fc5
• I have made SQL injection a top level section so that I can include navigation within it
• I have provided example of how queryRaw and executeRaw are used safely in a simple case.
• I have provided examples of how queryRaw and executeRaw can also be used unsafely.
• I have provided examples of how queryRaw and executeRaw can be used safely in more complicated cases as well.

What issue does this fix?

N/A

Any other relevant information

I deliberately tried to make all examples compatible with the Prisma playground so you can verify them.

[vercel]

@joshbouncesecurity is attempting to deploy a commit to the Prisma Team on Vercel.

A member of the Team first needs to authorize it.

[jharrell]

Thank you very much @joshbouncesecurity !

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
docs	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Mar 26, 2024 3:09pm

[janpio]

see internal Slack discussion: https://prisma-company.slack.com/archives/C058VM009HT/p1710493203426249

[jharrell]

Few notes from our internal review. Thank you again @joshbouncesecurity

[joshbouncesecurity]

Thanks @janpio @jharrell I think I have made all the requested changes

[joshbouncesecurity]

Hi @janpio I think I handled all your comments except this one which I think is better not changed.

You can see the specific updates here:
https://github.com/prisma/docs/pull/5735/files/6edc580fc29fcc95ffee52736cbd36122565dee1..228aa8354ab0112967a2ebb508802085ef2d4164

[jharrell]

Thank you again for all your help @joshbouncesecurity ! We really appreciate you working with us and a special thanks for your contribution 🙂

[joshbouncesecurity]

You're welcome, I always like to see more detailed security documentation :)